should we add a default role here as well for newly created users?